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CLAIMS 

1. A method operative in an Internet content delivery network (ICDN) having a 
set of content servers organized into regions and that provides delivery of Internet content 
on behalf of participating content providers, comprising: 

establishing a set of one or more enterprise CDN regions topologically near an 
enterprise firewall, wherein each enterprise CDN region has one or more ECDN-aware 
surrogate origin servers; 

responsive to a request for given ECDN content originating from an a given entity, 
mapping the given entity to a preferred enterprise CDN region that is likely to host the given 
ECDN content; 

determining if the given entity is authorized to obtain the given ECDN content; and 
if the given entity is authorized to obtain the given ECDN content, attempting to serve 
the given ECDN content from the preferred enterprise CDN region. 

2. The method as described in Claim 1 wherein the request for given ECDN 
content identifies a domain that is aliased to an ICDN domain. 

3. The method as described in Claim 1 wherein the ECDN is published to the 
ECDN-aware surrogate origin servers in an encrypted format. 

4. The method as described in Claim 1 further including the steps of: 
determining whether the given ECDN content is available from the preferred 
enterprise CDN region; and 

if the given ECDN content is not available from the preferred enterprise CDN region, 
tunneling back through the enterprise firewall to attempt to fetch the given ECDN 
content. 

5. The method as described in Claim 1 wherein the tunneling occurs over an 
authenticated and encrypted channel. 
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6. The method as described in Claim 1 wherein the given entity is an end user 
behind the enterprise firewall. 

7. The method as described in Claim 1 wherein the given entity is an end user 
associated with an enterprise partner. 
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8. A method operative in an Internet content delivery network (ICDN) having a 
set of content servers organized into regions and that provides delivery of Internet content 
on behalf of participating content providers, comprising: 

establishing a first enterprise CDN region topologically near an enterprise firewall, 
wherein the first enterprise CDN region has one or more ECDN-aware surrogate origin 
servers; 

establishing a second enterprise CDN region within the enterprise firewall, wherein the 
second enterprise CDN has one or more ICDN-aware surrogate origin servers; 

responsive to a request for given content originating from an end user within the 
enterprise, mapping the end user to the first enterprise CDN region if the given content is 
ECDN content and mapping the end user to the second enterprise CDN region if the given 
content is ICDN content; 

attempting to serve the given content from the respective enterprise CDN region. 

9. The method as described in Claim 8 further including the step of determining 
whether the end user mapped to the second enterprise CDN region is authorized to retrieve the 
ECDN content. 

10. The method as described in Claim 8 wherein the second enterprise CDN region 
is established in a public IP address space. 
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